IssueProof 0.1.4

正式发布 IssueProof v0.1.4。

• 同步包、CLI、插件及 wheel 版本至 0.1.4。
• 完成 Phase 2.1 之后的版本收口。
• 全量测试和构建验证通过。

Assets

• oss_issue_proof-0.1.4-py3-none-any.whl — 68,932 bytes — SHA-256: 0f4369de7288a9d8112adab6352cdd6862b78897856449da3521ec16025f2946
• oss_issue_proof-0.1.4.tar.gz — 109,420 bytes — SHA-256: 9ddd77064e82043e62a72ca857ebc705edc86cfab3ab3587712ed344a120ffdc
• SHA256SUMS.txt — 200 bytes — SHA-256: c89ee81662f56874322f5c950e3e1269525b1e40646d1fec1f92d83cb29543d0

目标平台为 Windows 10/11，项目支持 Python >=3.11。wheel 只安装 IssueProof CLI/runtime，不会自动安装全局 Codex Skill；Skill 需要按项目说明单独安装。源码对应不可变的 v0.1.4 tag。

IssueProof 0.1.3

IssueProof 0.1.3 is the first fully stabilized Windows-only release for turning GitHub Issue reproduction and Codex maintenance traces into reviewable evidence receipts.

Highlights

• Defines a single support contract: Windows 10/11 with Python 3.11, 3.12, or 3.14.
• Hardens command execution with shell-free Windows argv handling, bounded output capture, timeout cleanup, and explicit rejection of unsafe command strings.
• Strengthens evidence integrity by binding verification to the original run, repository, and raw argv; enforcing claim-specific evidence; and conservatively handling incomplete or malformed traces.
• Hardens Git, Unicode/space path, reparse-point, symlink, artifact, schema, redaction, and receipt output boundaries.
• Rewrites the README, contribution guide, security policy, Codex Skill, plugin metadata, examples, Issue Forms, and Windows-only CI/release workflows.

Verification

• GitHub Actions passed on Windows with Python 3.11, 3.12, and 3.14.
• Local suite: 137 passed, 2 permission-dependent tests skipped; 83% statement coverage.
• Ruff formatting and lint checks passed.
• Wheel and sdist were built from commit f3dc8ba833eafa5d01cf3c6f0dc9cda0f47ec3c6 using setuptools>=77.
• The wheel was installed offline in a Unicode-and-space Windows virtual environment; --version, doctor, and the Skill delegate passed.

SHA-256

• oss_issue_proof-0.1.3-py3-none-any.whl: 736eb49e984f9fcf243d0268e212b62e58c2d824563e19256debb64529fc3c2a
• oss_issue_proof-0.1.3.tar.gz: c152419a26bf7c1a5ba3cae082095f4a4c1f665a464c9306374f8dccd8a89857

This release publishes GitHub assets only; it does not publish to PyPI.

v0.1.2

v0.1.2 prerelease

Officially supported: Windows 10 and Windows 11.

Tested on Windows with Python 3.11, 3.12, and 3.14. The Windows GitHub Actions matrix completed pytest with coverage, Ruff format and lint checks, codex doctor, and package builds successfully.

Linux and macOS are unsupported, untested, and unverified.

Fixes

• Require a completed, nonzero baseline reproduction before a Codex verification can be reported as independently verified.
• Downgrade receipts when baseline, command, timeout, failure, or truncated-event evidence contradicts the requested verification outcome.
• Keep claims, verification evidence, receipts, and bundled JSON Schema validation consistent.
• Preserve explicit empty argv values and harden Windows timeout termination when taskkill /T /F fails.
• Align the CLI, Skill, plugin, documentation, and GitHub workflows with the Windows-only support boundary.

v0.1.1

v0.1.1 prerelease

This prerelease contains the scoped audit fixes for the existing release workflow.

Fixes

• Corrected the plugin interface.defaultPrompt type to the required one-element string array.
• Fixed the standalone Skill receipt-model reference and made its runner delegate to an installed issue-proof CLI without repository-source injection.
• Added changed-files count and UTF-8 path-length limits while preserving complete-stream totals, truncation metadata, and conservative dependent claims.
• Added least-privilege CI permissions and pinned third-party Actions to verified full commit SHAs.
• Clarified that the CLI wheel distributes the Python runtime/CLI only; the Skill/plugin and source artifacts are distributed from the repository/source bundle.

Validation

• Local validation: 51 tests passed, 1 existing Windows symlink test skipped; 81% coverage; Ruff format/lint, sdist/wheel build, wheel-only consumer, CLI help/version/doctor, success/refuted verification, claims, JSON Schema, Skill/plugin validators, standalone Skill checks, workflow checks, and sensitive-path scans passed.
• GitHub Actions: main CI and v0.1.1 tag CI completed successfully across all four matrix jobs.
• Two real isolated Codex forward tests completed: one triggered the Skill and produced a verified receipt; one enforced read-only/no-overreach behavior. No unfinished or UNVERIFIED forward test is reported as passed.

v0.1.0

v0.1.0 prerelease

IssueProof for Codex turns a Codex-assisted OSS maintenance run into an independently verifiable maintenance receipt.

Included

• Reproduce an issue baseline and preserve bounded, redacted evidence.
• Ingest a user-supplied JSONL trace without persisting the raw trace by default.
• Run an explicitly authorized verification command independently of Codex's narrative claims.
• Produce deterministic JSON and Markdown maintenance receipts with supported, refuted, and inconclusive claims.
• Provide the reproduce-github-issue Codex Skill, offline fixtures, schemas, and Git/AGENTS provenance checks.

Verification for this prerelease

• GitHub Actions passed on Ubuntu and Windows with Python 3.11 and 3.14.
• Local Windows validation passed on Python 3.12: 45 tests passed and one symlink-specific test was skipped because this host does not grant symlink creation.
• Offline success and failure end-to-end fixtures were exercised locally.

Quick start

Requires Python 3.11+:

python -m pip install -e .[dev]
issue-proof codex doctor
issue-proof codex ingest --trace examples/codex-maintenance/trace-order-a.jsonl --output .issue-proof/codex-run

This is an early-stage community prerelease. macOS has not been exercised by this release, and the tool does not replace maintainer review or sandbox explicitly authorized commands.